CVE-2022-26605

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality.

Source: CVE-2022-26605